Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JW0Qnj-6CdHu540792FWxEbYa9c.roa
File: JW0Qnj-6CdHu540792FWxEbYa9c.roa (raw, json)
Hash identifier: 7pXFN8kr5g+fykUCN6lNepOURgaeXOttgMdYo8C1V5E=
Subject key identifier: 25:6D:10:9E:3F:BA:09:D1:EE:E7:8D:3B:F7:61:56:C4:46:D8:6B:D7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F94DE47A2695B740A0D8FF56E3F250087
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JW0Qnj-6CdHu540792FWxEbYa9c.roa
Signing time: Fri 24 Jul 2026 16:03:43 +0000
ROA not before: Fri 24 Jul 2026 16:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a0c:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:de:47:a2:69:5b:74:0a:0d:8f:f5:6e:3f:25:00:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 24 16:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=256d109e3fba09d1eee78d3bf76156c446d86bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:e6:5e:83:ab:a4:a5:6a:f0:45:8e:fd:8a:
4f:b6:c4:a0:a2:a7:3e:56:fc:0a:ad:80:65:b2:04:
b0:3d:d8:26:3e:44:2c:db:36:6e:57:77:eb:d4:63:
46:c7:c7:09:57:b7:77:c3:cc:3f:6c:54:08:dd:28:
64:4f:bc:ff:f4:36:9b:89:3b:74:1a:48:8e:8f:4d:
49:6a:6e:0f:91:43:ef:4a:25:76:c9:8d:94:b1:5c:
b8:04:40:64:3f:75:7d:83:6a:6f:f3:93:d1:d9:de:
ea:02:ad:6b:a8:ed:e5:12:dd:32:ae:37:0f:aa:07:
0b:bc:ff:14:99:11:be:61:77:9a:26:41:e3:41:eb:
8a:74:c0:96:90:9a:04:4a:29:ae:ab:27:4c:3c:ef:
72:d4:36:67:f6:23:f0:a2:83:17:20:1e:36:9f:5b:
af:85:0a:3e:ee:3b:3e:79:ef:8e:f8:d6:96:99:6e:
89:c8:84:ae:ea:58:e5:1f:e2:a8:58:3a:5d:bc:12:
7b:78:5b:3a:89:6c:9c:82:d9:78:9f:26:d1:53:c8:
24:49:bc:d7:8a:70:07:3f:9c:49:5e:08:5c:c3:1e:
1e:ff:b4:aa:3e:6d:b2:b5:40:60:11:2c:7e:87:5b:
64:b4:88:0f:5e:05:6f:0d:d5:0b:42:2a:39:4f:c5:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:10:9E:3F:BA:09:D1:EE:E7:8D:3B:F7:61:56:C4:46:D8:6B:D7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JW0Qnj-6CdHu540792FWxEbYa9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:a580::/29
Signature Algorithm: sha256WithRSAEncryption
68:26:71:a0:5d:7e:4b:2f:90:c1:d0:c9:8d:08:9f:12:ce:cf:
6d:15:2e:b7:ec:97:14:e6:ab:3e:4b:d0:83:58:40:65:6f:a4:
e9:ac:cd:5c:44:48:10:58:38:d9:11:fc:e9:70:08:2f:e1:b5:
b6:25:2a:be:3c:d4:98:e2:f8:84:89:2b:9b:94:97:3f:1a:f6:
41:fa:ed:15:3c:9f:17:fb:16:56:a9:6a:46:3d:9f:e5:4d:4e:
a5:8d:f4:0e:bf:b8:f6:07:a5:7c:0b:2f:17:88:ea:c4:cf:2b:
76:d8:20:43:e6:fc:78:1e:d5:35:66:22:16:d5:b4:cb:1f:6d:
e9:71:05:64:39:5a:c2:33:d0:c4:83:a1:ca:bc:74:3d:5a:8d:
7a:69:09:81:28:26:0e:c9:32:86:92:e4:d8:7c:22:ef:60:ee:
a4:ac:7c:5b:5c:84:e1:75:91:cf:3b:ae:a0:ee:d9:25:56:4a:
99:7b:bc:21:a6:15:3b:01:3c:53:5f:ec:d1:d9:a9:ff:9e:7e:
6b:b3:bd:fc:5a:4c:1d:8f:fb:3a:37:40:7f:bd:fe:d8:1f:28:
4b:8d:99:dc:84:f3:7c:74:35:a9:f4:e1:00:58:03:ca:7a:aa:
96:ec:88:3b:a2:3b:94:02:98:82:8c:6a:3c:5d:59:94:67:da:
cc:00:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 14:43:32 2026 by rpki-client